VDOM partitioning design

[networkers]

Dear all,

we would like to use VDOM partitioning. In every example I found the FortiGates are ind of connected fully meshed, every vdom uses its own physical interface.  I actually want to do something different:

2 FortiGates (FGCP), both with:

- WAN link uses 2 10GbE Interfaces with LACP

- LAN link uses 2 10GbE Interfaces with LACP

root VDOM on vcluster 1 (FortiGate FGCP A1.1)

vdom1 VDOM on vlcuster 2 (FortiGate FGCP A1.2)

Do I need separate physical interfaces for each VDOM or may I share all physical links between vdoms, i.e. using different VLANs on top of the physical links (i.e. WAN and LAN interfaces)?

[xshkurti · Accepted solution]

@networkers 
You can have multiple VLANs on top of physical interfaces and assign different VLANs to different VDOMs.
Normally physical interfaces will stay in root VDOM as it is the management vdom as well.